Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b66f6bd4-70a4-36ca-81c2-e86f4c849907.roa
File:                     b66f6bd4-70a4-36ca-81c2-e86f4c849907.roa (raw, json)
Hash identifier:          JpBnLLvMdPNPSOPZ3WmYpOwk1B9SfVSFqvoSSBgRhjE=
Subject key identifier:   94:95:48:9B:E7:09:AD:B6:0F:4A:09:85:B6:3B:17:E9:B1:B0:B0:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B081E1CAC7415C1987B19100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b66f6bd4-70a4-36ca-81c2-e86f4c849907.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        161.188.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:81:e1:ca:c7:41:5c:19:87:b1:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=ae67e568-0abf-4c10-aa51-b0c6ca92146b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:6a:37:0e:db:24:50:db:7f:04:17:bc:b6:
                    7b:d8:ce:77:1d:01:97:88:14:01:a1:10:54:74:ab:
                    15:c0:b9:42:bb:6b:d6:3c:aa:91:1f:43:88:f1:a9:
                    d9:b3:b6:50:18:be:66:a8:8f:80:9d:f1:4a:89:0e:
                    38:57:d5:87:19:65:f7:17:e2:e5:43:59:d0:7c:da:
                    f4:cd:aa:31:cc:9b:35:ff:9c:c8:67:cb:1c:ef:30:
                    24:fe:ce:08:77:a0:4e:34:03:4a:2e:e7:87:d8:9b:
                    67:40:89:62:0c:9f:a1:46:09:ff:01:2f:83:1e:fa:
                    0d:19:7a:7b:8b:1b:48:f5:4e:2e:0a:70:67:08:75:
                    58:1e:ad:69:c6:17:e2:2e:14:bf:f4:36:9b:00:a1:
                    00:c8:33:4e:51:c4:c1:cf:b8:c5:89:bc:d3:45:b1:
                    d3:d0:26:4c:a8:c3:8a:28:65:9c:10:20:9d:39:cf:
                    f3:bb:4a:f9:bd:95:73:20:04:6c:5d:90:95:bd:58:
                    8f:0d:eb:98:aa:6a:e6:f0:09:5a:65:3f:fc:ed:77:
                    14:1e:34:9a:71:89:3a:57:86:2c:64:1c:2a:cf:0d:
                    37:54:07:8d:e4:88:b1:a4:be:0b:0f:7c:fb:af:80:
                    34:c5:8f:96:32:74:74:9b:05:63:a0:aa:f3:e3:e5:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:48:9B:E7:09:AD:B6:0F:4A:09:85:B6:3B:17:E9:B1:B0:B0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b66f6bd4-70a4-36ca-81c2-e86f4c849907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:3e:b2:15:cb:4f:83:db:de:96:d5:2a:30:d8:38:be:01:
         58:cc:06:52:46:9f:11:f0:4c:ed:f9:fc:96:e0:03:6b:7b:d6:
         ed:27:f1:9c:d2:ff:c0:73:e2:49:4a:f6:1c:1f:1e:6e:54:5d:
         93:1b:91:07:61:a6:48:39:d8:a5:fc:fc:69:65:9e:ae:7d:3d:
         5a:07:10:86:3d:15:6e:3e:71:b8:28:c0:0d:07:32:ea:85:d8:
         5e:61:82:65:cd:9f:36:e0:d5:45:d1:6a:20:b4:bb:b3:b9:c7:
         91:85:cd:1d:7c:1e:53:c8:31:b0:c0:ba:4e:ef:c4:f9:a2:01:
         ab:ca:e5:e9:1c:cc:21:8f:df:06:5c:5f:3b:03:45:50:0b:94:
         57:6e:7e:53:c5:c0:f8:73:e0:7d:5e:8a:bd:c5:a3:6e:09:69:
         89:74:4a:e1:1c:f7:f8:6c:af:c8:c8:40:3f:5d:86:cf:56:f1:
         9a:07:29:81:c4:31:30:29:16:c5:e1:a2:22:af:d7:2d:4a:d8:
         d3:ed:67:45:5a:59:3a:ea:3e:f8:70:dd:3f:6b:55:23:a5:82:
         1a:69:67:ea:f0:ff:9a:10:88:cf:f7:a1:43:b3:aa:85:58:f4:
         52:ff:bb:e1:95:82:a5:e3:d2:c6:bb:f7:ba:5b:0a:84:14:b3:
         96:1c:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----